GingerCal 1.4: bundled TLS 1.2, no bridge needed

CalDAV now goes through Minamp's own HTTP/TLS client (Bouncy Castle TLS 1.2, Mozilla
roots, keep-alive) instead of Apache HttpClient on Android 2.3's TLS 1.0, as the iPod
version does with BearSSL. The phone reaches the normal https:// Nextcloud address at
home and away; a pinned self-signed server or the old bridge still works.

- NetHttp transport; requests run on big-stack threads (the handshake overflows
  AsyncTask/IntentService stacks on Android 2.x)
- http:// -> https:// redirects on the same host are followed; other hosts still refused
- bridge wording replaced in Galician and English; README updated
- NetTest (TLS + CalDAV discovery through the new transport) replaces BridgeTest

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

build.sh

@@ -15,6 +15,7 @@ D8=${D8:-d8}
 APKTOOL=${APKTOOL:?set APKTOOL=/path/to/apktool.jar}
 APKSIGNER=${APKSIGNER:?set APKSIGNER=/path/to/apksigner.jar}
 KS=${KEYSTORE:-gingercal.keystore}
+BC_SRC=${BC_SRC:-$HOME/android-toolchain/bcsrc}   # Bouncy Castle renamed to com.minamp.bc (Minamp's tools/setup_toolchain.sh)
 VERSION_CODE=$(sed -n 's/.*android:versionCode="\([0-9]*\)".*/\1/p' AndroidManifest.xml)
 VERSION_NAME=$(sed -n 's/.*android:versionName="\([^"]*\)".*/\1/p' AndroidManifest.xml)
 
@@ -32,7 +33,8 @@ else
   CP="$OUT/stubs"
 fi
 # Java 8 bytecode, Java 6-era APIs only (Android 2.3 runs a Harmony class library).
-javac --release 8 -encoding UTF-8 -Xlint:-options -cp "$CP" -d "$OUT/classes" $(find src android -name '*.java')
+javac --release 8 -encoding UTF-8 -Xlint:-options -nowarn -cp "$CP" -sourcepath "src:android:$BC_SRC" \
+  -d "$OUT/classes" $(find src android -name '*.java')
 python3 tools/strip_method_params.py $(find "$OUT/classes" -name '*.class')
 
 # 2. dex (format 035 for Dalvik), then disassemble so smali re-assembles a clean dex
@@ -45,6 +47,7 @@ java -cp "$APKTOOL:$OUT/tools" Disassemble "$OUT/dex/classes.dex" "$OUT/apk/smal
 # 3. resources + manifest, compiled by real aapt (v1, the tool of the Gingerbread era)
 cp AndroidManifest.xml "$OUT/apk/"
 cp -r res/values "$OUT/apk/res/"
+cp -r assets "$OUT/apk/"   # Mozilla root certificates for the bundled TLS
 python3 tools/mkicon.py "$OUT/apk/res/drawable/icon.png" 48
 python3 tools/mkicon.py "$OUT/apk/res/drawable-ldpi/icon.png" 36
 cat > "$OUT/apk/apktool.yml" <<EOF